Read-only mode

invenio_vocabularies/services/permissions.py

@@ -1,6 +1,7 @@
 # -*- coding: utf-8 -*-
 #
 # Copyright (C) 2020-2021 CERN.
+# Copyright (C)      2022 TU Wien.
 #
 # Invenio-Vocabularies is free software; you can redistribute it and/or
 # modify it under the terms of the MIT License; see LICENSE file for more
@@ -9,15 +10,19 @@
 """Vocabulary permissions."""
 
 from invenio_records_permissions import RecordPermissionPolicy
-from invenio_records_permissions.generators import AnyUser, SystemProcess
+from invenio_records_permissions.generators import (
+    AnyUser,
+    DisableIfReadOnly,
+    SystemProcess,
+)
 
 
 class PermissionPolicy(RecordPermissionPolicy):
     """Permission policy."""
 
     can_search = [SystemProcess(), AnyUser()]
     can_read = [SystemProcess(), AnyUser()]
-    can_create = [SystemProcess()]
-    can_update = [SystemProcess()]
-    can_delete = [SystemProcess()]
-    can_manage = [SystemProcess()]
+    can_create = [SystemProcess(), DisableIfReadOnly()]
+    can_update = [SystemProcess(), DisableIfReadOnly()]
+    can_delete = [SystemProcess(), DisableIfReadOnly()]
+    can_manage = [SystemProcess(), DisableIfReadOnly()]

tests/services/test_service.py

@@ -2,6 +2,7 @@
 #
 # This file is part of Invenio.
 # Copyright (C) 2020-2021 CERN.
+# Copyright (C)      2022 TU Wien.
 #
 # Invenio-Vocabularies is free software; you can redistribute it and/or
 # modify it under the terms of the MIT License; see LICENSE file for more
@@ -13,6 +14,7 @@
 import pytest
 from invenio_cache import current_cache
 from invenio_pidstore.errors import PIDAlreadyExists, PIDDeletedError
+from invenio_records_resources.services.errors import PermissionDeniedError
 from marshmallow.exceptions import ValidationError
 from sqlalchemy.exc import IntegrityError
 
@@ -181,3 +183,44 @@ def test_indexed_at_query(app, db, service, identity, lang_type, lang_data):
         type="languages",
     )
     assert res.total == 1
+
+
+#
+# Read-only mode
+#
+
+
+def test_create_ro(app, service, identity, lang_type, lang_data):
+    """Try to create a vocabulary in read-only mode."""
+    app.config["RECORDS_PERMISSIONS_READ_ONLY"] = True
+
+    pytest.raises(PermissionDeniedError, service.create, identity, lang_data)
+
+
+def test_update_ro(app, service, identity, lang_type, lang_data):
+    """Try to update a vocabulary in read-only mode."""
+    app.config["RECORDS_PERMISSIONS_READ_ONLY"] = False
+    item = service.create(identity, lang_data)
+
+    app.config["RECORDS_PERMISSIONS_READ_ONLY"] = True
+    pytest.raises(
+        PermissionDeniedError, service.update, identity, ("languages", "eng"), lang_data
+    )
+
+
+def test_delete_ro(app, service, identity, lang_type, lang_data):
+    """Try to delete a vocabulary in read-only mode."""
+    app.config["RECORDS_PERMISSIONS_READ_ONLY"] = False
+    item = service.create(identity, lang_data)
+
+    app.config["RECORDS_PERMISSIONS_READ_ONLY"] = True
+    pytest.raises(PermissionDeniedError, service.delete, identity, ("languages", "eng"))
+
+
+def test_create_type_ro(app, service, identity):
+    """Try to create a vocabulary type in read-only mode."""
+    app.config["RECORDS_PERMISSIONS_READ_ONLY"] = True
+
+    pytest.raises(
+        PermissionDeniedError, service.create_type, identity, "newtype", "new"
+    )